Jamie Gritton 0304c73163 Add hierarchical jails. A jail may further virtualize its environment ... by creating a child jail, which is visible to that jail and to any parent jails. Child jails may be restricted more than their parents, but never less. Jail names reflect this hierarchy, being MIB-style dot-separated strings. Every thread now points to a jail, the default being prison0, which contains information about the physical system. Prison0's root directory is the same as rootvnode; its hostname is the same as the global hostname, and its securelevel replaces the global securelevel. Note that the variable "securelevel" has actually gone away, which should not cause any problems for code that properly uses securelevel_gt() and securelevel_ge(). Some jail-related permissions that were kept in global variables and set via sysctls are now per-jail settings. The sysctls still exist for backward compatibility, used only by the now-deprecated jail(2) system call. Approved by: bz (mentor)		2009-05-27 14:11:23 +00:00
..
bpf.c	rev bpf attach/detach event api to include the dlt	2009-05-25 16:34:35 +00:00
bpf.h	Sync DLTs with latest libpcap version.	2009-04-02 13:02:12 +00:00
bpf_buffer.c	Fill in BPF sysctl descriptions.	2008-07-25 23:58:09 +00:00
bpf_buffer.h	Introduce support for zero-copy BPF buffering, which reduces the	2008-03-24 13:49:17 +00:00
bpf_filter.c	Fix the last missing parentheses for a return statement in bpf_filter.c.	2008-08-29 20:00:55 +00:00
bpf_jitter.c	Initialize scratch memory for JIT-compiled filter when it is allocated.	2008-08-28 16:40:51 +00:00
bpf_jitter.h	Fix a typo in copyrights.	2008-08-25 20:43:13 +00:00
bpf_zerocopy.c	Clarify some comments, fix some types, and rename ZBUF_FLAG_IMMUTABLE to	2009-03-07 10:21:37 +00:00
bpf_zerocopy.h	Make sure we are clearing the ZBUF_FLAG_IMMUTABLE any time a free buffer	2008-07-05 20:11:28 +00:00
bpfdesc.h	Remove trailing ';' in BPFD_LOCK_ASSERT macro.	2008-08-01 22:08:14 +00:00
bridgestp.c	replace IFQ_ENQUEUE + if_start with if_transmit	2009-04-27 22:46:26 +00:00
bridgestp.h	Fix spelling.	2007-12-09 20:47:12 +00:00
ethernet.h	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
fddi.h	- Make IFP2ENADDR() a pointer to IF_LLADDR() rather than another	2005-11-11 07:36:14 +00:00
firewire.h	Stop embedding struct ifnet at the top of driver softcs. Instead the	2005-06-10 16:49:24 +00:00
flowtable.c	remove gratuitous memory barrier, a remnant of unified L2 / L3	2009-04-27 22:45:19 +00:00
flowtable.h	- Import infrastructure for caching flows as a means of accelerating L3 and L2 lookups	2009-04-19 00:16:04 +00:00
ieee8023ad_lacp.c	Use the flowid if its available for selecting the tx port.	2009-04-30 14:25:44 +00:00
ieee8023ad_lacp.h	Remove extra semicolons.	2008-03-17 01:26:44 +00:00
if.c	Set ifp->if_afdata_initialized to 0 while holding IF_AFDATA_LOCK on ifp,	2009-05-22 22:22:21 +00:00
if.h	Add a new interface flag, IFF_DYING, which is set when a device driver	2009-04-23 09:32:30 +00:00
if_arc.h	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_arcsubr.c	remove call to IFQ_HANDOFF is it called by if_transmit in the default case	2009-04-27 22:44:26 +00:00
if_arp.h	- Store pointer to the link-level address right in "struct ifnet"	2005-11-11 16:04:59 +00:00
if_atm.h	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_atmsubr.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_bridge.c	Reorder the bridge add and delete routines to avoid calling ifpromisc() with	2009-05-01 19:46:42 +00:00
if_bridgevar.h	Add an option to limit the number of source MACs that can be behind a bridge	2007-11-04 08:32:27 +00:00
if_clone.c	V_irtualize the if_clone framework, thus allowing for clonable ifnets	2009-05-23 21:43:44 +00:00
if_clone.h	Fix clone destruction, can't use the simple api because that does not remove	2008-09-20 19:38:37 +00:00
if_dead.c	During if_detach(), invoke if_dead() to set the ifnet's function	2009-04-23 11:51:53 +00:00
if_disc.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_dl.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
if_edsc.c	Give a hint that softc can contain many things besides ifp.	2007-03-26 09:05:10 +00:00
if_ef.c	replace IFQ_HANDOFF with if_transmit	2009-04-27 22:45:56 +00:00
if_enc.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_enc.h	Increase statistic counters for enc0 interface when enabled	2008-08-12 09:05:01 +00:00
if_ethersubr.c	Change the curvnet variable from a global const struct vnet *,	2009-05-05 10:56:12 +00:00
if_faith.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_fddisubr.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_fwsubr.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_gif.c	Permit buiding kernels with options VIMAGE, restricted to only a single	2009-04-30 13:36:26 +00:00
if_gif.h	Make indentation more uniform accross vnet container structs.	2009-05-02 08:16:26 +00:00
if_gre.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_gre.h	Add support for the optional key in the GRE header.	2008-06-20 17:26:34 +00:00
if_iso88025subr.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_lagg.c	Use the flowid if its available for selecting the tx port.	2009-04-30 14:25:44 +00:00
if_lagg.h	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_llatbl.c	When an interface address is removed and the last prefix	2009-05-20 21:07:15 +00:00
if_llatbl.h	When an interface address is removed and the last prefix	2009-05-20 21:07:15 +00:00
if_llc.h	Move the __packed declarations. This makes sizeof(struct llc) 8 again	2006-12-01 17:50:11 +00:00
if_loop.c	V_irtualize the if_clone framework, thus allowing for clonable ifnets	2009-05-23 21:43:44 +00:00
if_media.c	- Introduce ifmedia_baudrate(), which returns correct baudrate of the	2006-02-14 12:10:03 +00:00
if_media.h	Add TWINAX (Twin Axial Copper for 10G networking) media types.	2008-12-17 22:59:29 +00:00
if_mib.c	Permit buiding kernels with options VIMAGE, restricted to only a single	2009-04-30 13:36:26 +00:00
if_mib.h	Add a new leaf to the net.link.generic.ifdata.%d sysctl to retrieve	2006-01-04 12:57:09 +00:00
if_sppp.h	Stop embedding struct ifnet at the top of driver softcs. Instead the	2005-06-10 16:49:24 +00:00
if_spppfr.c	Stop embedding struct ifnet at the top of driver softcs. Instead the	2005-06-10 16:49:24 +00:00
if_spppsubr.c	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
if_stf.c	Prefer ifa_link (structure field) to ifa_list (macro alias for it).	2009-04-20 22:41:19 +00:00
if_stf.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
if_tap.c	Remove the splimp()/splx() calls around the setting of the MTU. They are	2009-03-17 02:32:36 +00:00
if_tap.h	Add new TAPGIFNAME tap(4) character device ioctl. This is a	2008-09-08 22:43:55 +00:00
if_tapvar.h	Stop embedding struct ifnet at the top of driver softcs. Instead the	2005-06-10 16:49:24 +00:00
if_tun.c	Acquire interfce address list lock while walking the interface address	2009-04-20 23:25:38 +00:00
if_tun.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
if_types.h	Remove IPX over IP tunneling support, which allows IPX routing over IP	2007-06-13 14:01:43 +00:00
if_var.h	Introduce the if_vmove() function, which will be used in the future	2009-05-22 22:09:00 +00:00
if_vlan.c	The vlan code has not required the miibus code since 6.0 when	2009-04-17 17:40:47 +00:00
if_vlan_var.h	Prepare for 802.1p:	2007-02-28 22:05:30 +00:00
iso88025.h	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
netisr.c	Garbage collect now-unused NETISR_FORCEQUEUE, which overrode the global	2009-05-13 17:22:33 +00:00
netisr.h	Garbage collect unused NETISR_{ATM,NETGRAPH,PPP} netisr constants.	2009-05-18 10:33:23 +00:00
pfil.c	A few locking fixes and cleanups to pfil hook registration,	2008-12-16 17:03:22 +00:00
pfil.h	Line wrap very long line in struct packet_filter_hook definition.	2008-12-13 12:03:21 +00:00
pfkeyv2.h	Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC	2007-07-03 12:13:45 +00:00
ppp_defs.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
radix.c	remove assertion checks for now - ipfw uses its own lock for protecting its radix tree instance	2008-12-16 11:01:36 +00:00
radix.h	- convert radix node head lock from mutex to rwlock	2008-12-07 21:15:43 +00:00
radix_mpath.c	Extend route command:	2009-04-14 23:05:36 +00:00
radix_mpath.h	When RADIX_MPATH is enabled, the route selection is not rotating	2008-05-30 09:34:35 +00:00
raw_cb.c	For all files including net/vnet.h directly include opt_route.h and	2009-02-27 14:12:05 +00:00
raw_cb.h	Put a global variables, which were virtualized but formerly	2008-12-11 16:26:38 +00:00
raw_usrreq.c	For all files including net/vnet.h directly include opt_route.h and	2009-02-27 14:12:05 +00:00
route.c	Unbreak options VIMAGE + nooptions INVARIANTS kernel builds.	2009-05-02 05:02:28 +00:00
route.h	Change if_output to take a struct route as its fourth argument in order	2009-04-16 20:30:28 +00:00
rtsock.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
slcompress.c	Remove advertising clause from University of California Regent's	2004-04-07 20:46:16 +00:00
slcompress.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
vnet.h	V_irtualize the if_clone framework, thus allowing for clonable ifnets	2009-05-23 21:43:44 +00:00
zlib.c	Forward declare z_errmsg with static linkage since it is defined	2005-09-11 16:13:02 +00:00
zlib.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00